I was going through some old blog posts, and one I found contained the following story: Mouse Story A mouse looked through the crack in the wall to see the farmer and his wife open a package. “What food might this contain?” The mouse wondered – he was devastated to discover it was a mousetrap. […] ↓ Read the rest of this entry…
Here is another guest post by WiFi Jedi ———————————————————————————— Can IT Vendors truly be objective? Or does everything they say have to be viewed through a lens of “they are trying to sell me something”? Join me while I rant… Personally, I think IT vendors can be objective. Sure, we manufacture and sell things… *Gasp* […] ↓ Read the rest of this entry…
I will start out this post by saying that I generally am a fan of SC Magazine. Though the product reviews are not very good, they often have informative interviews with some folks whose views I respect. But I had to guffaw a bit with the Nov 2008 edition when I got to the opinion […] ↓ Read the rest of this entry…
I get a lot of foreign-language spam, and most of it gets sent to junk and deleted. So while searching through my email today, I ran across these three emails. The bottom two emails are identical, but when I saw the first couple of words, I thought they were foreign and almost hit the delete […] ↓ Read the rest of this entry…
Why is it when you praise Vista or slam Mac, you are a dumbass and a MSFT shill, but when you praise Mac and insult Vista, you are a wonderful and enlightened person? This comes from observation of the blogs over at Computerworld (blatant plug – I blog over there as well). Look at Seth […] ↓ Read the rest of this entry…
The Internet is a nuisance. Really, it is. It never ceases to amaze me how much "trouble" the Internet causes. Now I will be the first to say that it is possibly the best innovation in human history. But at the same time, it has also caused more problems, headaches, and heartaches than almost any […] ↓ Read the rest of this entry…
I went out to see one of our customers this week who had their web app pwned a while back. This is the second client since I have been with Accuvant that we were trying to help via our security assessment services who got smacked around before they could make up their mind to spend […] ↓ Read the rest of this entry…
Since I haven’t been doing a lot of serious posting for a while, it has been a while since I had an altercation with The Hoff on anything. But now it is in full swing, and I have to say that I have missed this a lot! So here’s the deal for those of you […] ↓ Read the rest of this entry…
Man, am I getting hammered for my latest post over at Computerworld about the DDoS launched on the Church of Scientology! I really can’t engage in a lot of back and forth over there since it is not my personal site, so I will do it over here. For all you people slapping me around […] ↓ Read the rest of this entry…
I had a client call me right before Thanksgiving in emergency mode (one of the Dallas clients that I am starting to work with). Looks like he has a remote office that uses the local cable company as their ISP and connects back to corporate via a site-to-site VPN. I found out that they have […] ↓ Read the rest of this entry…
I know, I know. I can answer that question with a resounding “NO” and get on with things. But seriously, what does it take to even approach security nirvana? I mean really, there are so many people spouting theories about where we need to go to make the Internet secure. Then there are a bunch of frickin’ […] ↓ Read the rest of this entry…
OK, I was going to leave this one alone, but it is just bothering me so much. A couple of weeks back, I wrote a blog post about a comment I had left on a post by Douglas Schweitzer’s at his Computerworld blog. Douglas said in his post that a bot was “essentially just another […] ↓ Read the rest of this entry…
PLEASE, PLEASE, PLEASE do not truncate your post in your RSS feed. I use Blogbridge so I can pull down my feeds and read them when I am running around and don’t have Internet access. When I get to your blog and I see something interesting, if the post is cut off in the feed, […] ↓ Read the rest of this entry…
Anyone heard of any action against these medical companies under HIPAA regulation? Neither have I. This is the problem with government trying to fix a problem. While I agree with the basic attempt HIPAA is making at securing personal medical data, it just makes no sense to have anyone try to comply when nothing happens […] ↓ Read the rest of this entry…
So Determina released an advisory about a bug they found in IE in Vista. They ran a simple ActiveX fuzzer against it, and it crashed. They were surprised that it worked, and so am I. However, that is not the whole story. When they mentioned the problem to MSFT, they came to the conclusion that […] ↓ Read the rest of this entry…
Seems like Cisco has partnered with Cybertrust in creating some kind of PCI-geared hardware package / solution. Cybertrust is supposedly giving this amorphous hardware blob (I guess a hardware package can be customized for each scenario) the PCI checkmark. OK, so which company is going to purchase this package for its stores and tell its […] ↓ Read the rest of this entry…
I am attending the RSA conference in February as press because of my Computerworld blog. I applied at the RSA Conference site, and they accepted me. And like Martin has been posting, I have been getting multiple requests for interviews, breifings, etc. from security companies that are attending. Well, today I received an email from […] ↓ Read the rest of this entry…
I just wrote a post over at Computerworld entitled The Security of Web 2.0 – an Oxymoron. Then I find this story about Senators McCain and Schumer proposing legislation that will require sex offenders to register their IM names and email addresses. I need to read more about this bill. Like typical security legislation passed […] ↓ Read the rest of this entry…
CJ Kelly, a blogger at Computerworld, proclaimed yesterday that the Internet is safe from DDoS. She says: …maybe 5-8 years ago this was a possibility, but I don’t think it’s possible to do a large scale DDoS attack any more. Man, I am so happy to hear this news. You can’t fathom the relief at […] ↓ Read the rest of this entry…
 Before you read this post, go take a look at my “Rules” for my blog.  OK, now that you are back, let me piss off some people. During this election season, I have to say that most of the security bloggers out there stayed out of the fray by sticking to what their […] ↓ Read the rest of this entry…
Some points: Whether or not you are worried about all the problems with electronic voting machines, you need to go vote. Whether you are Republican, Democrat, Green Party, Libertarian, or Independent, you need to go vote. Whether or not you are fed up with Washington, you need to go vote. Too many people have paid […] ↓ Read the rest of this entry…
I’ll be the first one that says TV shows and movies are hardly based on reality. But when they screw up something that is near and dear to me, I get very upset. For instance, I was in the Army and Army National Guard for over 7 years. Though I was never a career soldier, […] ↓ Read the rest of this entry…
…but it is also one big pain in the neck! I have been thrown into the process of answering an RFP (request for proposal) for a city government down here in Texas, and I cannot begin to tell you how tedious and ridiculously complicated the whole process can be. RFPs can be complicated enough with […] ↓ Read the rest of this entry…
OK, let’s imagine you are an international company that has a product used by thousands of companies all over the world.  Hundreds of people call you daily to get support for your product. Your HQ is in Florida. You know a hurricane (actually, a Tropical Storm) is heading your way. In fact, you have had SEVERAL days of warning. […] ↓ Read the rest of this entry…
I am going to try to make this short since Treasure Hunters is about to come one, so here goes. I posted yesterday on my Computerworld blog about some stuff I wrote for a friend of mine on two-factor authentication. I checked back today to see if I had any comments, and I did (woo hoo […] ↓ Read the rest of this entry…
Just got through reading this article at Security Focus. So basically, fuzzers are becoming more and more prominent in finding flaws in applications (they have been around a while, but they are now gaining notoriety with the general populace). More and more flaws are coming out on all sorts of applications, but the main focus […] ↓ Read the rest of this entry…
Bear with me here. I drove a tank in my Army days, and one of the things I learned was that the M1A1 Abrams tank was built with a low profile so it would be less visible to the enemy. But notice one word in that sentence: enemy. You don’t build it with a low […] ↓ Read the rest of this entry…
OK, I am usually fairly impressed by InfoWorld’s articles and other writings. I get the magazine, I subscribe to their news feed.  But this InfoWorld article read like it should be in the Times or something. They put a title of “Hackers Striking Databases in Record Numbers”, give us a couple of stats, and then go […] ↓ Read the rest of this entry…
©0-2012 An Information Security Place | Powered by WordPress with Easel | Subscribe: RSS | Back to Top ↑